Malicious code in dewanto-telur93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109d220519e3f70ddd6a861e1271e37290cd1ac0f73e07db03a7cd090bf9e11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasisayur69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b328309eb9c1d3f220849c3dd866fa41616650c0905ddb324b6d9d2a05cd12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-jengkol70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6422c6bb8b7329aa995c9514f68362afa4641cae147a98f7aa9e35d11875098d The package arif-jengkol70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50209 Malicious code in dewi-gembus95-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae78e49c4dbfb4ac9400cb60d5425943e91c6651f96deedddc0d19d9a54aa9b The package dewi-gembus95-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

UBUNTU-CVE-2023-45805

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...